Tripwire, Execution and flow alerts
Add-onHear about a widening execution gap or a shift in a pool's flow, without polling.
An add-on for Truefill and Poolscope keys: one Server-Sent Events stream that flags a token when its execution gap widens past its baseline, and a pool when bots or aggregators take a markedly different share of its swaps.
- ALMs and vault managers
- Risk teams
- Market makers
Where an alert would have fired
Live data· block 53,134,715WETH's round-trip execution gap at $100K: buy at the ask, sell at the bid, as a share of mid, per published minute. Tripwire flags a token when its gap rises past a multiple of its own baseline. Set the multiple and see when that would have happened.
Event log
What the stream would have sent, newest first.
Waiting for history…
Computed in your browser from the free public price history; the baseline here is the window's median. The hosted Tripwire evaluates every 60 s on the latest block against a 24-hour baseline of stored reference samples, and pushes the event to you.
Live gap board
Live marketRound-trip gap of a $1K trade for every featured token right now. Tripwire watches the tokens and sizes you choose and tells you when one widens.
The alert stream
Sample events · illustrative numbersOne Server-Sent Events connection per key: a snapshot on connect, then health-flag and traffic-jump events, and silence otherwise.
+23.28 points against a threshold of 20: the event fires.
id: a41f09c2-1
event: snapshot
data: {"chainId":"8453","health":[{"token":"0x4200000000000000000000000000000000000006","sizeUsd":"100000","flagged":false,"gapPercent":"0.2230352656","baselinePercent":"0.1874","baselineUnavailable":null,"unavailable":null,"gapMultiple":3,"blockNumber":"52914031","evaluatedAt":"2026-10-19T14:23:42.118Z"}],"pools":["0xd0b53d9277642d899df5c87a3966a349a798f224"],"attributedThroughHour":"1792414800","trafficEvaluatedHour":"1792414800","replay":"none","healthIntervalSeconds":60}
id: a41f09c2-2
event: health-flag
data: {"token":"0x4200000000000000000000000000000000000006","sizeUsd":"100000","flagged":true,"gapPercent":"0.6118204411","baselinePercent":"0.1874","baselineUnavailable":null,"unavailable":null,"gapMultiple":3,"blockNumber":"52914211","evaluatedAt":"2026-10-19T14:29:42.402Z","chainId":"8453","previous":false}
id: a41f09c2-3
event: traffic-jump
data: {"chainId":"8453","pool":"0xd0b53d9277642d899df5c87a3966a349a798f224","hour":"1792418400","bucket":"bot","latestSharePct":"61.40","trailingSharePct":"38.12","deltaPoints":"23.28","thresholdPoints":20,"latestSwaps":"307","trailingSwaps":"28410"}
Example of GET /public/oracle/stream with an API key. Traffic jumps need a key with the traffic grant.
What Tripwire gives you
Alerts instead of polling
Subscribe once to the tokens, sizes and pools you care about. You get an event when something crosses a threshold, and silence otherwise.
Shared evaluation, shared cost
Health is evaluated once per chain for every subscriber. Each evaluation is charged once per organization, for the distinct items it watches.
State on connect
Every connection starts with a snapshot of each watched item's last evaluation, so a client never has to guess what it missed.
Reconnect without gaps
Events carry ids. Reconnect with Last-Event-ID and buffered traffic jumps are replayed, with a flag when the replay cannot be complete.
How it works
- 01
Subscribe
Open the stream with your key and a list of token:size items and pools.
- 02
We evaluate
Health is re-priced on a fixed cadence (60 s by default). Traffic is compared each time a new hour is attributed.
- 03
You react
health-flag and traffic-jump events arrive with the numbers behind them.
Call it from code
One Server-Sent Events connection per key. It opens with a snapshot of everything you watch, then sends health-flag when a watched token × size crosses into or out of the flagged state, and traffic-jump when a watched pool's aggregator or bot share moves away from its 7-day share.
GET /api/v1/public/oracle/stream · opening is free; each evaluation costs the key 50 CU + 1 CU per watched token × size (health) or 50 CU (traffic)
Send your key in x-api-key.
Keep-alive is an SSE comment (: ping) every 15 s. A stream lasts up to 60 minutes and ends with a closed event; reconnect with Last-Event-ID to replay buffered traffic jumps.
Example values are illustrative. Token addresses are real Base contracts; amounts are raw integer units as decimal strings.
curl -N "https://llens.abanchev.com/api/v1/public/oracle/stream?chainId=8453&health=0x4200000000000000000000000000000000000006:100000&pools=0xd0b53d9277642d899df5c87a3966a349a798f224" \
-H "x-api-key: $LL_API_KEY" \
-H "accept: text/event-stream"id: a41f09c2-1
event: snapshot
data: {"chainId":"8453","health":[{"token":"0x4200000000000000000000000000000000000006","sizeUsd":"100000","flagged":false,"gapPercent":"0.2230352656","baselinePercent":"0.1874","baselineUnavailable":null,"unavailable":null,"gapMultiple":3,"blockNumber":"52914031","evaluatedAt":"2026-10-19T14:23:42.118Z"}],"pools":["0xd0b53d9277642d899df5c87a3966a349a798f224"],"attributedThroughHour":"1792414800","trafficEvaluatedHour":"1792414800","replay":"none","healthIntervalSeconds":60}
id: a41f09c2-2
event: health-flag
data: {"token":"0x4200000000000000000000000000000000000006","sizeUsd":"100000","flagged":true,"gapPercent":"0.6118204411","baselinePercent":"0.1874","baselineUnavailable":null,"unavailable":null,"gapMultiple":3,"blockNumber":"52914211","evaluatedAt":"2026-10-19T14:29:42.402Z","chainId":"8453","previous":false}
id: a41f09c2-3
event: traffic-jump
data: {"chainId":"8453","pool":"0xd0b53d9277642d899df5c87a3966a349a798f224","hour":"1792418400","bucket":"bot","latestSharePct":"61.40","trailingSharePct":"38.12","deltaPoints":"23.28","thresholdPoints":20,"latestSwaps":"307","trailingSwaps":"28410"}
Endpoints
Every call returns JSON with the block it was computed on.
Plans
- Builder
- Pro
- Enterprise
An add-on to Truefill (health flags) and Poolscope (traffic jumps).
Pricing on request.
Good to know
- Server-Sent Events only; there are no outbound webhooks.
- One stream per key and up to 10 per organization. A stream lasts up to 60 minutes, then reconnects.
- Health baselines exist for $10K and $100K at sampled assets.
- Traffic jumps are delivered at least once.
Other Liquidity Lens products
- Liquidity LensTruefill, Execution-price oracleThe price you can actually execute, at your size, with the route that proves it.
- Liquidity LensPoolscope, Pool earnings and flow analyticsKnow what every pool of your pair earned, hour by hour, and who traded through it.
- Liquidity LensHeadroom, LP opportunity discoveryFind the pairs where new liquidity would earn more in fees than it gives up to arbitrage.
- Liquidity LensRangefinder, LP range and capital backtestsTest a range or a capital size against the swaps that actually hit the pool, before you deploy.